Ukrainian police have apprehended a hacker who used malicious software to steal the personal data of residents of Canada and the United States.
According to the police, a 31-year-old resident of Vinnytsia created malicious software to steal personal data from the Android operating system. The perpetrator then used the obtained information to hack into Google accounts.
To propagate his malware, the hacker created and administered several websites offering users various software for free download. The culprit deployed an entire advertising campaign on the internet to promote the malicious web sites.
After installing the modified programs, the victims' computers were infected with malware that gave the criminal access to bank accounts, online banking systems, and other personal data.
The hacker then sold the stolen data to other cybercriminals, communicating with clients through a Russian phone number. The payments received in bitcoins were transferred to his and his wife's bank accounts.
The suspect’s accomplices from the dark web are currently being identified, the police said.
The suspect began engaging in criminal activity in 2017 and turned to mass phishing in 2021. According to preliminary data, he earned at least 3.5 million (~$92,000) hryvnias through cybercriminal activity.
The man has been charged with Part 2 of Article 209 (Legalization (laundering) of property obtained by criminal means), Part 2 of Article 361 (Unauthorized interference in the operation of information systems, electronic communication networks), and Part 1 of Article 361-1 (Creation with the aim of unlawful use, dissemination or sale of malicious software or technical means, as well as their dissemination or sale) of the Criminal Code of Ukraine.
The suspect faces up to 8 years in prison with property confiscation.